last executing test programs: 6.91356196s ago: executing program 1 (id=223): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x5b04, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f0000000080)={0x5, 0x7f}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.758427947s ago: executing program 0 (id=232): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000007d68c5ee17688a2003208020300ecff3f0200000300000a000000", 0x24) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.450902756s ago: executing program 3 (id=235): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4004895) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) io_uring_setup(0xadc, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x257}) unshare(0x22020400) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 4.431339559s ago: executing program 0 (id=237): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000025c0)="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", 0xa9b}], 0x6}}], 0x1, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000600), &(0x7f0000000640)=0x4) 4.311756523s ago: executing program 0 (id=238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x9, 0xffff, 0x7, 0x8}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.255711005s ago: executing program 3 (id=239): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x103, 0x4, 0x0, 0x2}, 0x1c) 4.137669049s ago: executing program 3 (id=240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_SEQ={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x20000844) 4.102406229s ago: executing program 3 (id=241): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xa8}}, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0x4c08, 0x0) 4.054175301s ago: executing program 0 (id=242): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) prctl$PR_CAPBSET_READ(0x17, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x3, &(0x7f0000000500)={0x0, 0x10, 0x4, @thr={&(0x7f0000000140)="48455c7f578823398f59abe92fccf6e54f582d889c8458f64848f78029591b8c1571e312ca46bfb2a362c3180bfd3cf4bec0fd2627aebf0131661fbec4c185dba22b068a696cf639515db33aecf0fa67eed567603b8842519cd03f20307787dc0e987a4e5693e6dc7f8866d2311074b81d33f1c4ea12bcc72d342e6cb960f2642303238ac71cb02ecf53eb3d4066704d1e3c93c38687a76fae878f80bef8f4b6ffdf4aa97f664fbf950e39", &(0x7f0000000440)="ad1929fb5555879a3e6538132c9ee8de3c82e47cf09e838d6030044d2b4f2de38faaba21b133add2cf5dae5f2d49d34e9410f28cd776b293f25faaecf55c8c405f7738dfa7b5b73327268a2040825db5e4eac48f4171b8dc9fdfb3d0dd363374ef6bc752d550f50b376500232d68c0914de9666033f7fea5338b7e744d2479e0711b0432f3c8a462dc7f2679d77a8d59fb733ced"}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x380000b, 0x204031, 0xffffffffffffffff, 0x5e9b7000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvfrom(0xffffffffffffffff, &(0x7f0000001700)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xffffffdb) r2 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0x7fffffffffffffff) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0xcb) 3.76359598s ago: executing program 1 (id=243): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x40, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 3.499898259s ago: executing program 3 (id=244): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x3, 0x2, &(0x7f0000000140)={0x2, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9950cf5e1dee93"}}) 3.311543625s ago: executing program 1 (id=245): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, 0x0) 2.793467261s ago: executing program 0 (id=249): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x1000404, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000200)=r0) 1.801617023s ago: executing program 0 (id=253): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x90, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1025, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x1, 0x10, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x15}, [@feature_unit={0xb, 0x24, 0x6, 0x6, 0x1, 0x2, [0x1, 0x9], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xd8, 0x1, 0x9, 0x2, 'y`4'}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x4, 0x7, 0x50}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x6, 0x7, {0x7, 0x25, 0x1, 0x4, 0xf7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0x77, {0x7, 0x25, 0x1, 0xc, 0x8, 0x5}}}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.768612534s ago: executing program 3 (id=254): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1808c00, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x42240, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) socket$packet(0x11, 0x3, 0x300) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) r7 = dup2(r6, r1) listen(0xffffffffffffffff, 0x50) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x400980) sendmsg$NFT_BATCH(r7, 0x0, 0x8042) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(r0, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0xffe1) syz_usb_connect(0x3, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 1.690878207s ago: executing program 1 (id=255): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg(r0, &(0x7f0000008200)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000005c0)="727ee53d47fba2c8aa7425166e6cc9f24a81adcecc137a1bb083162a4e9222c83c689888d5281ae562d977edd922bb4fa4dccf4c86759f5611b7c00f86bdf00c8df1892afa0c0b5669170ad7c33da9d9e65e73bb0fc2389958f50697af58a148c998", 0x62}], 0x1}}], 0x1, 0x8000) 1.59346933s ago: executing program 1 (id=256): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r3, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="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", 0x1ba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) accept4$unix(r3, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000000), 0x8) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xff}, {0x1000, 0x5000, 0x3, 0x10, 0x8, 0x0, 0x1, 0x64, 0xe, 0x0, 0x3, 0xfc}, {0xdddd1000, 0x25000, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x40, 0x6, 0x1, 0x4, 0x2}, {0x4000, 0xffff1000, 0xf, 0x1, 0x0, 0x8, 0x3, 0x7, 0x0, 0x0, 0x2}, {0x6000, 0xffff1000, 0xa, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x6, 0xfc}, {0x4000, 0x10000, 0xf, 0x3, 0x9b, 0x1, 0xfc, 0x4, 0x9, 0x7, 0xc0, 0x9}, {0x3000, 0x0, 0x10, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x42}, {0x30000, 0x3000, 0xe, 0xa, 0x2, 0x6f, 0x9, 0xed, 0x0, 0x9, 0x1, 0x5}, {0x2000, 0xb}, {}, 0x9df9ffdf, 0x0, 0x0, 0x3, 0x5, 0x8000, 0x70000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) r7 = io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x6a7, 0x40000, 0x6, 0x23}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="137c0300231a05002c0012800e000100697036677265746170000000180002801400070000000000000000000000000002"], 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x20040840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) r8 = syz_open_dev$dvb_dvr(&(0x7f0000000380), 0x0, 0x800) preadv2(r8, &(0x7f0000000300)=[{&(0x7f0000000000)=""/71, 0x47}], 0x1, 0x800, 0xc23, 0x1) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xffffffffffffffff, 0x407ffffffffffe, 0x800000000000002}, 0xfffffffc, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x239, 0x0, 0x0, {0xa, 0x0, 0xd6cf026a8b753ac6}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) r11 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r11, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) 1.202909032s ago: executing program 2 (id=258): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) prctl$PR_CAPBSET_READ(0x17, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x3, &(0x7f0000000500)={0x0, 0x10, 0x4, @thr={&(0x7f0000000140)="48455c7f578823398f59abe92fccf6e54f582d889c8458f64848f78029591b8c1571e312ca46bfb2a362c3180bfd3cf4bec0fd2627aebf0131661fbec4c185dba22b068a696cf639515db33aecf0fa67eed567603b8842519cd03f20307787dc0e987a4e5693e6dc7f8866d2311074b81d33f1c4ea12bcc72d342e6cb960f2642303238ac71cb02ecf53eb3d4066704d1e3c93c38687a76fae878f80bef8f4b6ffdf4aa97f664fbf950e39", &(0x7f0000000440)="ad1929fb5555879a3e6538132c9ee8de3c82e47cf09e838d6030044d2b4f2de38faaba21b133add2cf5dae5f2d49d34e9410f28cd776b293f25faaecf55c8c405f7738dfa7b5b73327268a2040825db5e4eac48f4171b8dc9fdfb3d0dd363374ef6bc752d550f50b376500232d68c0914de9666033f7fea5338b7e744d2479e0711b0432f3c8a462dc7f2679d77a8d59fb733ced"}}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x380000b, 0x204031, 0xffffffffffffffff, 0x5e9b7000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvfrom(0xffffffffffffffff, &(0x7f0000001700)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xffffffdb) r2 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0x7fffffffffffffff) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0xcb) 1.016658518s ago: executing program 2 (id=259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xb6, 0x1, 0x80, 0x8, 0xb, 0xfffffffe}, {0xd, 0x1, 0x0, 0xc71b, 0x8000, 0x4}, 0x7, 0xfffffff0, 0x5a9}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e105000000890600001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 609.421521ms ago: executing program 2 (id=260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x40, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f}, 0x24}}, 0x0) 592.732171ms ago: executing program 1 (id=261): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x5b04, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f0000000080)={0x5, 0x7f}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 425.543387ms ago: executing program 2 (id=262): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000025c0)="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", 0xa9b}], 0x6}}], 0x1, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000600), &(0x7f0000000640)=0x4) 229.595823ms ago: executing program 2 (id=263): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) 0s ago: executing program 2 (id=264): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x8184, 0x10000, 0x0, 0x4c}, 0x0, 0x0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000"], 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r1, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 72.933679][ T5762] cgroup: Unknown subsys name 'net' [ 73.036930][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.407256][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.390918][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.399447][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.407328][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.415569][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.430008][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.437417][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.470064][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.479841][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.487669][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.500838][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.508953][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.516647][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.524877][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.551933][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.582093][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.590980][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.600551][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.608019][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.636851][ T5090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.647713][ T5090] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.655583][ T5090] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.664187][ T5090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.679709][ T5090] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.689618][ T5090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.945701][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 77.083676][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 77.116007][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.123809][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.131825][ T5773] bridge_slave_0: entered allmulticast mode [ 77.138578][ T5773] bridge_slave_0: entered promiscuous mode [ 77.176046][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.183927][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.191369][ T5773] bridge_slave_1: entered allmulticast mode [ 77.198022][ T5773] bridge_slave_1: entered promiscuous mode [ 77.280482][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.297208][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 77.315092][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.371680][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.378898][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.386275][ T5783] bridge_slave_0: entered allmulticast mode [ 77.393113][ T5783] bridge_slave_0: entered promiscuous mode [ 77.401766][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.408916][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.416290][ T5783] bridge_slave_1: entered allmulticast mode [ 77.424195][ T5783] bridge_slave_1: entered promiscuous mode [ 77.431693][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 77.455530][ T5773] team0: Port device team_slave_0 added [ 77.463792][ T5773] team0: Port device team_slave_1 added [ 77.524351][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.568430][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.578592][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.585838][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.611847][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.646121][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.653562][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.660874][ T5778] bridge_slave_0: entered allmulticast mode [ 77.668029][ T5778] bridge_slave_0: entered promiscuous mode [ 77.676407][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.686010][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.714470][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.746272][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.753604][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.761680][ T5778] bridge_slave_1: entered allmulticast mode [ 77.768367][ T5778] bridge_slave_1: entered promiscuous mode [ 77.783308][ T5783] team0: Port device team_slave_0 added [ 77.791654][ T5783] team0: Port device team_slave_1 added [ 77.853467][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.863020][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.891799][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.904942][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.914424][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.940868][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.954248][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.968461][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.977974][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.985299][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.992618][ T5786] bridge_slave_0: entered allmulticast mode [ 77.999452][ T5786] bridge_slave_0: entered promiscuous mode [ 78.051842][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.059139][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.066442][ T5786] bridge_slave_1: entered allmulticast mode [ 78.074117][ T5786] bridge_slave_1: entered promiscuous mode [ 78.085100][ T5773] hsr_slave_0: entered promiscuous mode [ 78.092285][ T5773] hsr_slave_1: entered promiscuous mode [ 78.118420][ T5778] team0: Port device team_slave_0 added [ 78.156513][ T5778] team0: Port device team_slave_1 added [ 78.174561][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.193349][ T5783] hsr_slave_0: entered promiscuous mode [ 78.200243][ T5783] hsr_slave_1: entered promiscuous mode [ 78.206310][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.215174][ T5783] Cannot create hsr debugfs directory [ 78.232350][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.308134][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.315488][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.344099][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.373813][ T5786] team0: Port device team_slave_0 added [ 78.385568][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.392974][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.419203][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.448434][ T5786] team0: Port device team_slave_1 added [ 78.500151][ T5090] Bluetooth: hci0: command tx timeout [ 78.563427][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.570872][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.597290][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.625048][ T5778] hsr_slave_0: entered promiscuous mode [ 78.631806][ T5778] hsr_slave_1: entered promiscuous mode [ 78.637828][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.645458][ T5778] Cannot create hsr debugfs directory [ 78.656907][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.664749][ T5090] Bluetooth: hci1: command tx timeout [ 78.667972][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.670599][ T5090] Bluetooth: hci2: command tx timeout [ 78.701166][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.739297][ T5090] Bluetooth: hci3: command tx timeout [ 78.843375][ T5786] hsr_slave_0: entered promiscuous mode [ 78.850076][ T5786] hsr_slave_1: entered promiscuous mode [ 78.856146][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.863981][ T5786] Cannot create hsr debugfs directory [ 78.962714][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.991068][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.001856][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.021337][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.121746][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.132220][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.144161][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.180071][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.222488][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.240522][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.251426][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.294329][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.358243][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.367960][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.382023][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.394336][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.458867][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.510418][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.527489][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.558973][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.566339][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.597179][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.604351][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.621989][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.656226][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.663460][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.705297][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.712500][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.743137][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.822352][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.833508][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.853716][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.902325][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.909535][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.948671][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.973795][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.981059][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.005192][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.012409][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.096550][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.103792][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.133696][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.252388][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.318247][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.390415][ T5773] veth0_vlan: entered promiscuous mode [ 80.501823][ T5783] veth0_vlan: entered promiscuous mode [ 80.511036][ T5773] veth1_vlan: entered promiscuous mode [ 80.562958][ T5783] veth1_vlan: entered promiscuous mode [ 80.582326][ T5090] Bluetooth: hci0: command tx timeout [ 80.604305][ T5773] veth0_macvtap: entered promiscuous mode [ 80.622897][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.656100][ T5773] veth1_macvtap: entered promiscuous mode [ 80.686432][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.702533][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.717797][ T5783] veth0_macvtap: entered promiscuous mode [ 80.736440][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.744046][ T5090] Bluetooth: hci1: command tx timeout [ 80.747755][ T5780] Bluetooth: hci2: command tx timeout [ 80.754928][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.764576][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.773329][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.782234][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.797969][ T5783] veth1_macvtap: entered promiscuous mode [ 80.819681][ T5780] Bluetooth: hci3: command tx timeout [ 80.851067][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.861984][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.874294][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.898184][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.912111][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.923839][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.960104][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.968873][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.981484][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.990308][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.028276][ T5778] veth0_vlan: entered promiscuous mode [ 81.076930][ T5778] veth1_vlan: entered promiscuous mode [ 81.085138][ T5786] veth0_vlan: entered promiscuous mode [ 81.098817][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.112032][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.156136][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.167971][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.169999][ T5786] veth1_vlan: entered promiscuous mode [ 81.276818][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.291675][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.327985][ T5778] veth0_macvtap: entered promiscuous mode [ 81.344491][ T5778] veth1_macvtap: entered promiscuous mode [ 81.354684][ T5786] veth0_macvtap: entered promiscuous mode [ 81.443771][ T5786] veth1_macvtap: entered promiscuous mode [ 81.454823][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.468357][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.473352][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.496681][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.515933][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.526646][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.541046][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.584197][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.595494][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.605931][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.617412][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.630740][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.654515][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.688052][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.703275][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.714803][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.728340][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.743526][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.755135][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.764936][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.775245][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.790016][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.803435][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.817868][ T5846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 81.852295][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.885354][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.907454][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.944787][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.967271][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.992725][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.019047][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.044798][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.064452][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.086324][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.105457][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.315515][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.341725][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.547937][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.548998][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.602068][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.613793][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.661788][ T5780] Bluetooth: hci0: command tx timeout [ 82.777579][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.825891][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.835063][ T5780] Bluetooth: hci2: command tx timeout [ 82.835162][ T5090] Bluetooth: hci1: command tx timeout [ 82.878416][ T5855] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.901715][ T5090] Bluetooth: hci3: command tx timeout [ 84.739316][ T5090] Bluetooth: hci0: command tx timeout [ 84.900484][ T5090] Bluetooth: hci1: command tx timeout [ 84.900493][ T5780] Bluetooth: hci2: command tx timeout [ 84.980294][ T5090] Bluetooth: hci3: command tx timeout [ 85.375942][ T5892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14'. [ 86.996359][ T9] cfg80211: failed to load regulatory.db [ 87.214582][ T3394] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.419585][ T3394] usb 1-1: device descriptor read/64, error -71 [ 87.719379][ T3394] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.729604][ T5920] syzkaller0: entered promiscuous mode [ 87.748061][ T5920] syzkaller0: entered allmulticast mode [ 87.761421][ T5910] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 87.889440][ T3394] usb 1-1: device descriptor read/64, error -71 [ 88.017923][ T5924] syz.2.26 uses obsolete (PF_INET,SOCK_PACKET) [ 88.026550][ T3394] usb usb1-port1: attempt power cycle [ 88.105860][ T5928] macvtap1: entered promiscuous mode [ 88.112628][ T5928] dummy0: entered promiscuous mode [ 88.131756][ T5928] team0: Device macvtap1 failed to register rx_handler [ 88.144219][ T5928] dummy0: left promiscuous mode [ 88.450031][ T3394] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 88.501259][ T3394] usb 1-1: device descriptor read/8, error -71 [ 88.733631][ T5949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.30'. [ 88.783489][ T3394] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.841220][ T3394] usb 1-1: device descriptor read/8, error -71 [ 88.969582][ T3394] usb usb1-port1: unable to enumerate USB device [ 89.037896][ T5957] syzkaller0: entered promiscuous mode [ 89.045649][ T5957] syzkaller0: entered allmulticast mode [ 89.469331][ T3394] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.697349][ T3394] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.728216][ T3394] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 89.745997][ T3394] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 89.769281][ T3394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.777498][ T3394] usb 3-1: Product: syz [ 89.795531][ T3394] usb 3-1: Manufacturer: syz [ 89.807849][ T3394] usb 3-1: SerialNumber: syz [ 89.835340][ T3394] usb 3-1: config 0 descriptor?? [ 89.856713][ T5968] syzkaller0: entered promiscuous mode [ 89.865581][ T5968] syzkaller0: entered allmulticast mode [ 90.142005][ T8] usb 3-1: USB disconnect, device number 2 [ 90.309307][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.419357][ T3394] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 90.489264][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 90.496154][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 90.504479][ T9] usb 2-1: config 0 has no interface number 0 [ 90.516387][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 90.525630][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.533772][ T9] usb 2-1: Product: syz [ 90.537996][ T9] usb 2-1: Manufacturer: syz [ 90.542668][ T9] usb 2-1: SerialNumber: syz [ 90.549469][ T9] usb 2-1: config 0 descriptor?? [ 90.561717][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 90.609356][ T3394] usb 1-1: Using ep0 maxpacket: 16 [ 90.618332][ T3394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.629856][ T3394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 90.640777][ T3394] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 90.659639][ T3394] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 90.669551][ T3394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.699302][ T3394] usb 1-1: config 0 descriptor?? [ 90.781357][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 90.815020][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 90.867735][ T5978] netlink: 72 bytes leftover after parsing attributes in process `syz.2.44'. [ 91.116980][ T5983] syz.3.45: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 91.140098][ T5983] CPU: 0 PID: 5983 Comm: syz.3.45 Not tainted syzkaller #0 [ 91.147366][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 91.157470][ T5983] Call Trace: [ 91.160765][ T5983] [ 91.163705][ T5983] dump_stack_lvl+0x18c/0x250 [ 91.168403][ T5983] ? show_regs_print_info+0x20/0x20 [ 91.173605][ T5983] ? load_image+0x420/0x420 [ 91.178116][ T5983] ? __rcu_read_unlock+0x7c/0xd0 [ 91.183065][ T5983] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 91.189481][ T5983] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 91.195991][ T5983] warn_alloc+0x246/0x340 [ 91.200340][ T5983] ? zone_watermark_ok_safe+0x230/0x230 [ 91.205993][ T5983] ? __mutex_trylock_common+0x160/0x270 [ 91.211545][ T5983] __vmalloc_node_range+0x129/0x1320 [ 91.216844][ T5983] ? tomoyo_path_number_perm+0x217/0x5e0 [ 91.222569][ T5983] ? rcu_is_watching+0x15/0xb0 [ 91.227343][ T5983] ? trace_contention_end+0x39/0xe0 [ 91.232554][ T5983] ? __mutex_lock+0x30d/0xc80 [ 91.237242][ T5983] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 91.242875][ T5983] ? tomoyo_path_number_perm+0x217/0x5e0 [ 91.248514][ T5983] ? free_vm_area+0x50/0x50 [ 91.253031][ T5983] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 91.258067][ T5983] vmalloc+0x79/0x90 [ 91.261966][ T5983] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 91.266997][ T5983] dvb_dvr_do_ioctl+0x12e/0x220 [ 91.271858][ T5983] dvb_usercopy+0x195/0x2b0 [ 91.276366][ T5983] ? dvb_dvr_release+0x3e0/0x3e0 [ 91.281312][ T5983] ? dvb_generic_ioctl+0xb0/0xb0 [ 91.286276][ T5983] ? dvb_dvr_poll+0x230/0x230 [ 91.290963][ T5983] dvb_dvr_ioctl+0x29/0x30 [ 91.295390][ T5983] __se_sys_ioctl+0xfd/0x170 [ 91.299989][ T5983] do_syscall_64+0x55/0xb0 [ 91.304422][ T5983] ? clear_bhb_loop+0x40/0x90 [ 91.309098][ T5983] ? clear_bhb_loop+0x40/0x90 [ 91.313771][ T5983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.319682][ T5983] RIP: 0033:0x7fc66dd9ce59 [ 91.324097][ T5983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.343714][ T5983] RSP: 002b:00007fc66ecae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.352135][ T5983] RAX: ffffffffffffffda RBX: 00007fc66e015fa0 RCX: 00007fc66dd9ce59 [ 91.360107][ T5983] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000005 [ 91.368105][ T5983] RBP: 00007fc66de32e6f R08: 0000000000000000 R09: 0000000000000000 [ 91.376101][ T5983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.384076][ T5983] R13: 00007fc66e016038 R14: 00007fc66e015fa0 R15: 00007ffdcc49f1a8 [ 91.392062][ T5983] [ 91.408083][ T5983] Mem-Info: [ 91.412654][ T5983] active_anon:5617 inactive_anon:0 isolated_anon:0 [ 91.412654][ T5983] active_file:1169 inactive_file:39949 isolated_file:0 [ 91.412654][ T5983] unevictable:768 dirty:1815 writeback:0 [ 91.412654][ T5983] slab_reclaimable:10114 slab_unreclaimable:91128 [ 91.412654][ T5983] mapped:24498 shmem:1368 pagetables:565 [ 91.412654][ T5983] sec_pagetables:0 bounce:0 [ 91.412654][ T5983] kernel_misc_reclaimable:0 [ 91.412654][ T5983] free:1367145 free_pcp:8607 free_cma:0 [ 91.469935][ T3394] hid-generic 0003:057E:2019.0001: hidraw0: USB HID v0.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 91.482984][ T5983] Node 0 active_anon:22468kB inactive_anon:0kB active_file:4676kB inactive_file:159596kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97992kB dirty:7248kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10664kB pagetables:2260kB sec_pagetables:0kB all_unreclaimable? no [ 91.570444][ T5983] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 91.647316][ T5992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.47'. [ 91.678326][ T5983] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 91.720666][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 91.723477][ T5785] usb 2-1: USB disconnect, device number 2 [ 91.749285][ T5983] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 91.759001][ T5983] Node 0 DMA32 free:1565352kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22932kB inactive_anon:0kB active_file:4676kB inactive_file:158860kB unevictable:1536kB writepending:7236kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:9584kB local_pcp:2908kB free_cma:0kB [ 91.790471][ T5785] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 91.809544][ T5983] lowmem_reserve[]: 0 0 0 0 0 [ 91.814411][ T5983] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:12kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 91.845851][ T5785] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 91.867737][ T5785] quatech2 2-1:0.51: device disconnected [ 91.876812][ T5983] lowmem_reserve[]: 0 0 0 0 0 [ 91.889093][ T5983] Node 1 Normal free:3886200kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:25464kB local_pcp:11296kB free_cma:0kB [ 91.934507][ T788] usb 1-1: USB disconnect, device number 6 [ 91.978730][ T5983] lowmem_reserve[]: 0 0 0 0 0 [ 91.986448][ T5983] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 92.002598][ T5983] Node 0 DMA32: 296*4kB (UE) 1013*8kB (U) 368*16kB (UM) 1*32kB (U) 33*64kB (UME) 23*128kB (UME) 14*256kB (UME) 11*512kB (UME) 3*1024kB (UME) 6*2048kB (ME) 371*4096kB (M) = 1564456kB [ 92.021511][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'. [ 92.058752][ T5983] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 92.091961][ T5983] Node 1 Normal: 204*4kB (UME) 57*8kB (UME) 42*16kB (UME) 51*32kB (UME) 16*64kB (UME) 7*128kB (UME) 1*256kB (M) 1*512kB (E) 1*1024kB (U) 2*2048kB (UE) 946*4096kB (M) = 3886200kB [ 92.117291][ T5983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.133201][ T5983] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.142840][ T5983] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.158598][ T5983] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.168168][ T5983] 42507 total pagecache pages [ 92.173077][ T5983] 0 pages in swap cache [ 92.177362][ T5983] Free swap = 124696kB [ 92.182836][ T5983] Total swap = 124996kB [ 92.187424][ T5983] 2097051 pages RAM [ 92.191523][ T5983] 0 pages HighMem/MovableOnly [ 92.196462][ T5983] 416931 pages reserved [ 92.219143][ T5983] 0 pages cma reserved [ 92.226979][ T5992] bond0: (slave bond_slave_1): Releasing backup interface [ 92.558082][ T6000] syzkaller0: entered promiscuous mode [ 92.574902][ T6000] syzkaller0: entered allmulticast mode [ 92.679294][ T5785] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.839342][ T5785] usb 4-1: device descriptor read/64, error -71 [ 93.109286][ T5785] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.135803][ T6014] syz.2.52[6014]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.168844][ T6014] process 'syz.2.52' launched '/dev/fd/9' with NULL argv: empty string added [ 93.269365][ T5785] usb 4-1: device descriptor read/64, error -71 [ 93.274300][ T3394] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 93.399619][ T5785] usb usb4-port1: attempt power cycle [ 93.478139][ T3394] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.507701][ T3394] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 93.533764][ T3394] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 93.550211][ T3394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.565226][ T3394] usb 1-1: Product: syz [ 93.569889][ T3394] usb 1-1: Manufacturer: syz [ 93.574610][ T3394] usb 1-1: SerialNumber: syz [ 93.588202][ T3394] usb 1-1: config 0 descriptor?? [ 93.819520][ T5785] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.899806][ T5785] usb 4-1: device descriptor read/8, error -71 [ 93.930674][ T3394] usb 1-1: USB disconnect, device number 7 [ 94.179815][ T5785] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 94.192339][ T6034] syzkaller0: entered promiscuous mode [ 94.198534][ T6034] syzkaller0: entered allmulticast mode [ 94.220163][ T5785] usb 4-1: device descriptor read/8, error -71 [ 94.339754][ T5785] usb usb4-port1: unable to enumerate USB device [ 94.426556][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.61'. [ 94.439684][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 94.450680][ T6038] hsr_slave_0: left promiscuous mode [ 94.471908][ T6038] hsr_slave_1: left promiscuous mode [ 95.762472][ T6064] syzkaller0: entered promiscuous mode [ 95.784481][ T6064] syzkaller0: entered allmulticast mode [ 95.809227][ T6064] Zero length message leads to an empty skb [ 96.439361][ T788] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 96.514562][ T6081] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6082] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6081] [ 96.536584][ T28] audit: type=1800 audit(1781937474.739:2): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.75" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 96.599324][ T788] usb 1-1: device descriptor read/64, error -71 [ 96.869427][ T788] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 97.030651][ T788] usb 1-1: device descriptor read/64, error -71 [ 97.170688][ T788] usb usb1-port1: attempt power cycle [ 97.218467][ T6094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.80'. [ 97.260688][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 97.479254][ T3394] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.599508][ T788] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 97.641791][ T788] usb 1-1: device descriptor read/8, error -71 [ 97.693156][ T3394] usb 2-1: Using ep0 maxpacket: 16 [ 97.736084][ T3394] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.824118][ T3394] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.907034][ T3394] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.919269][ T788] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 97.933032][ T6094] syz.2.80 (6094) used greatest stack depth: 20680 bytes left [ 97.970048][ T788] usb 1-1: device descriptor read/8, error -71 [ 97.989239][ T3394] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 98.077650][ T3394] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.091049][ T788] usb usb1-port1: unable to enumerate USB device [ 98.118032][ T3394] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 98.138623][ T3394] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 98.148337][ T3394] usb 2-1: Manufacturer: syz [ 98.173495][ T3394] usb 2-1: config 0 descriptor?? [ 98.539449][ T3394] rc_core: IR keymap rc-hauppauge not found [ 98.545383][ T3394] Registered IR keymap rc-empty [ 98.560385][ T3394] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.599387][ T3394] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.680217][ T3394] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 98.719525][ T3394] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 98.737681][ T6103] syzkaller0: entered promiscuous mode [ 98.754749][ T6103] syzkaller0: entered allmulticast mode [ 98.759614][ T3394] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.799344][ T3394] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.839321][ T3394] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.869529][ T3394] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.908719][ T3394] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.949632][ T3394] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 98.987907][ T3394] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 99.035743][ T3394] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 99.073495][ T3394] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 99.109366][ T3394] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 99.141557][ T3394] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 99.172126][ T3394] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 99.198757][ T3394] usb 2-1: USB disconnect, device number 3 [ 99.379346][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 99.576346][ T9] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 99.595461][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.616940][ T9] usb 3-1: Product: syz [ 99.621748][ T9] usb 3-1: Manufacturer: syz [ 99.627397][ T9] usb 3-1: SerialNumber: syz [ 99.635670][ T9] usb 3-1: config 0 descriptor?? [ 99.646808][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 99.659417][ T788] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 99.849409][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 99.868185][ T788] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.886251][ T9] gspca_stk1135: reg_w 0x2 err -71 [ 99.909275][ T788] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 99.924923][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 99.942296][ T788] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.952447][ T9] gspca_stk1135: Sensor write failed [ 99.964223][ T788] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 99.978180][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 99.985647][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.996607][ T788] usb 1-1: Product: syz [ 99.997601][ T9] gspca_stk1135: Sensor write failed [ 100.002198][ T788] usb 1-1: Manufacturer: syz [ 100.011189][ T788] usb 1-1: SerialNumber: syz [ 100.024942][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 100.037888][ T788] usb 1-1: config 0 descriptor?? [ 100.039944][ T9] gspca_stk1135: Sensor read failed [ 100.048498][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 100.057403][ T9] gspca_stk1135: Sensor read failed [ 100.063242][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 100.076046][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 100.092399][ T9] gspca_stk1135: Sensor read failed [ 100.098149][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 100.105225][ T9] gspca_stk1135: Sensor read failed [ 100.111034][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 100.117441][ T9] gspca_stk1135: Sensor write failed [ 100.125893][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 100.132983][ T9] gspca_stk1135: Sensor write failed [ 100.143605][ T9] stk1135: probe of 3-1:0.0 failed with error -71 [ 100.155498][ T9] usb 3-1: USB disconnect, device number 3 [ 100.435345][ T6129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'. [ 100.469951][ T788] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 100.477063][ T788] gs_usb: probe of 1-1:0.0 failed with error -121 [ 100.498806][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 100.532641][ T6130] syzkaller0: entered promiscuous mode [ 100.538172][ T6130] syzkaller0: entered allmulticast mode [ 100.710812][ T788] usb 1-1: USB disconnect, device number 12 [ 101.019392][ T5850] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.069666][ T5840] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 101.209290][ T5850] usb 3-1: Using ep0 maxpacket: 8 [ 101.222088][ T5850] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 101.244165][ T5850] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 101.279421][ T5840] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 101.289239][ T5850] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.298307][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.316418][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.324850][ T5840] usb 4-1: Product: syz [ 101.330127][ T5840] usb 4-1: Manufacturer: syz [ 101.334752][ T5840] usb 4-1: SerialNumber: syz [ 101.417819][ T6144] syzkaller0: entered promiscuous mode [ 101.423507][ T6144] syzkaller0: entered allmulticast mode [ 101.776158][ T5840] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 102.353186][ T6152] binder: 6150:6152 ioctl c0306201 200000000000 returned -14 [ 102.597850][ T5840] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 102.614038][ T5840] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 102.626522][ T5840] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 102.639602][ T5840] lan78xx: probe of 4-1:1.0 failed with error -71 [ 102.652113][ T6160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.107'. [ 102.666073][ T5840] usb 4-1: USB disconnect, device number 6 [ 102.682709][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 103.356649][ T6166] syzkaller0: entered promiscuous mode [ 103.363008][ T6166] syzkaller0: entered allmulticast mode [ 103.549349][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.667349][ T6170] syzkaller1: entered promiscuous mode [ 103.673983][ T6170] syzkaller1: entered allmulticast mode [ 103.733676][ T3394] usb 3-1: USB disconnect, device number 4 [ 103.744910][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.780636][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.812657][ T8] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 103.827565][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.848866][ T8] usb 2-1: Product: syz [ 103.857799][ T8] usb 2-1: Manufacturer: syz [ 103.868160][ T8] usb 2-1: SerialNumber: syz [ 103.884171][ T8] usb 2-1: config 0 descriptor?? [ 104.005324][ T6179] syz.2.116: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 104.030469][ T6179] CPU: 1 PID: 6179 Comm: syz.2.116 Not tainted syzkaller #0 [ 104.037832][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.047893][ T6179] Call Trace: [ 104.051174][ T6179] [ 104.054109][ T6179] dump_stack_lvl+0x18c/0x250 [ 104.058795][ T6179] ? show_regs_print_info+0x20/0x20 [ 104.063999][ T6179] ? load_image+0x420/0x420 [ 104.068505][ T6179] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 104.074926][ T6179] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 104.081433][ T6179] warn_alloc+0x246/0x340 [ 104.085767][ T6179] ? zone_watermark_ok_safe+0x230/0x230 [ 104.091333][ T6179] ? __mutex_trylock_common+0x160/0x270 [ 104.096881][ T6179] __vmalloc_node_range+0x129/0x1320 [ 104.102174][ T6179] ? tomoyo_path_number_perm+0x217/0x5e0 [ 104.107807][ T6179] ? rcu_is_watching+0x15/0xb0 [ 104.112572][ T6179] ? trace_contention_end+0x39/0xe0 [ 104.117769][ T6179] ? __mutex_lock+0x30d/0xc80 [ 104.122452][ T6179] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 104.128081][ T6179] ? tomoyo_path_number_perm+0x217/0x5e0 [ 104.133715][ T6179] ? free_vm_area+0x50/0x50 [ 104.138240][ T6179] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 104.143269][ T6179] vmalloc+0x79/0x90 [ 104.147166][ T6179] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 104.152195][ T6179] dvb_dvr_do_ioctl+0x12e/0x220 [ 104.157051][ T6179] dvb_usercopy+0x195/0x2b0 [ 104.161558][ T6179] ? dvb_dvr_release+0x3e0/0x3e0 [ 104.166497][ T6179] ? dvb_generic_ioctl+0xb0/0xb0 [ 104.171453][ T6179] ? dvb_dvr_poll+0x230/0x230 [ 104.176143][ T6179] dvb_dvr_ioctl+0x29/0x30 [ 104.180578][ T6179] __se_sys_ioctl+0xfd/0x170 [ 104.185176][ T6179] do_syscall_64+0x55/0xb0 [ 104.189598][ T6179] ? clear_bhb_loop+0x40/0x90 [ 104.194271][ T6179] ? clear_bhb_loop+0x40/0x90 [ 104.198949][ T6179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.204852][ T6179] RIP: 0033:0x7f158719ce59 [ 104.209268][ T6179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.228877][ T6179] RSP: 002b:00007f15880d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.237323][ T6179] RAX: ffffffffffffffda RBX: 00007f1587415fa0 RCX: 00007f158719ce59 [ 104.245311][ T6179] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000004 [ 104.253289][ T6179] RBP: 00007f1587232e6f R08: 0000000000000000 R09: 0000000000000000 [ 104.261263][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.269236][ T6179] R13: 00007f1587416038 R14: 00007f1587415fa0 R15: 00007ffc980db408 [ 104.277218][ T6179] [ 104.290610][ T6179] Mem-Info: [ 104.293792][ T6179] active_anon:5634 inactive_anon:0 isolated_anon:0 [ 104.293792][ T6179] active_file:10756 inactive_file:39980 isolated_file:0 [ 104.293792][ T6179] unevictable:768 dirty:689 writeback:0 [ 104.293792][ T6179] slab_reclaimable:9925 slab_unreclaimable:91891 [ 104.293792][ T6179] mapped:24636 shmem:1362 pagetables:574 [ 104.293792][ T6179] sec_pagetables:0 bounce:0 [ 104.293792][ T6179] kernel_misc_reclaimable:0 [ 104.293792][ T6179] free:1353024 free_pcp:11854 free_cma:0 [ 104.479534][ T6185] syzkaller0: entered promiscuous mode [ 104.487566][ T6179] Node 0 active_anon:22488kB inactive_anon:0kB active_file:43024kB inactive_file:159720kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98532kB dirty:2744kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10716kB pagetables:2220kB sec_pagetables:0kB all_unreclaimable? no [ 104.534709][ T6179] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 104.571449][ T6179] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 104.610773][ T6179] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 104.616708][ T6179] Node 0 DMA32 free:1510536kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22452kB inactive_anon:0kB active_file:43024kB inactive_file:158884kB unevictable:1536kB writepending:2732kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:22076kB local_pcp:15976kB free_cma:0kB [ 104.672756][ T788] usb 2-1: USB disconnect, device number 4 [ 104.707505][ T6179] lowmem_reserve[]: 0 0 0 0 0 [ 104.724978][ T6179] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:12kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 104.755433][ T6179] lowmem_reserve[]: 0 0 0 0 0 [ 104.757977][ T6188] syzkaller0: entered promiscuous mode [ 104.766616][ T6179] Node 1 Normal free:3886200kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:25624kB local_pcp:11328kB free_cma:0kB [ 104.768759][ T6188] syzkaller0: entered allmulticast mode [ 104.796851][ T5850] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 104.810260][ T6179] lowmem_reserve[]: 0 0 0 0 0 [ 104.819321][ T6179] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 104.834174][ T6179] Node 0 DMA32: 530*4kB (UE) 1178*8kB (UE) 973*16kB (UME) 321*32kB (UME) 258*64kB (ME) 14*128kB (UME) 5*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 353*4096kB (UM) = 1511048kB [ 104.854526][ T6179] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 104.867223][ T6179] Node 1 Normal: 204*4kB (UME) 57*8kB (UME) 42*16kB (UME) 51*32kB (UME) 16*64kB (UME) 7*128kB (UME) 1*256kB (M) 1*512kB (E) 1*1024kB (U) 2*2048kB (UE) 946*4096kB (M) = 3886200kB [ 104.887295][ T6179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.896942][ T6179] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.907366][ T6179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.917530][ T6179] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.932359][ T6179] 52099 total pagecache pages [ 104.937076][ T6179] 0 pages in swap cache [ 104.942447][ T6179] Free swap = 124696kB [ 104.946624][ T6179] Total swap = 124996kB [ 104.951765][ T6179] 2097051 pages RAM [ 104.960752][ T6179] 0 pages HighMem/MovableOnly [ 104.965474][ T6179] 416931 pages reserved [ 104.979486][ T6179] 0 pages cma reserved [ 105.011257][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.028122][ T5850] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 105.047514][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.070334][ T5850] usb 4-1: config 0 descriptor?? [ 105.163513][ T6195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.121'. [ 105.194071][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'. [ 105.409823][ T5840] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 105.492051][ T5850] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 105.520216][ T5850] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input6 [ 105.619992][ T5840] usb 1-1: Using ep0 maxpacket: 8 [ 105.646186][ T5840] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 105.662403][ T5850] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 105.677299][ T5840] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 105.695755][ T5840] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.732955][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.956375][ T6210] syzkaller0: entered promiscuous mode [ 105.962711][ T6210] syzkaller0: entered allmulticast mode [ 106.034100][ T3394] usb 4-1: USB disconnect, device number 7 [ 106.154003][ T6214] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 106.418174][ T6226] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.479691][ T5840] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 106.638469][ T6233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.138'. [ 106.662474][ T5840] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.680332][ T5840] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 106.697760][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.138'. [ 106.710450][ T5840] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 106.720761][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.728801][ T5840] usb 2-1: Product: syz [ 106.733085][ T5840] usb 2-1: Manufacturer: syz [ 106.737714][ T5840] usb 2-1: SerialNumber: syz [ 106.757253][ T5840] usb 2-1: config 0 descriptor?? [ 107.038750][ T6238] syzkaller0: entered promiscuous mode [ 107.057399][ T6238] syzkaller0: entered allmulticast mode [ 107.110900][ T9] usb 2-1: USB disconnect, device number 5 [ 107.619424][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.800710][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.811054][ T27] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 107.820933][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.833144][ T27] usb 3-1: config 0 descriptor?? [ 107.845638][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 108.009422][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 108.047165][ T27] pwc: send_video_command error -71 [ 108.052806][ T27] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 108.061206][ T27] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 108.070279][ T27] usb 3-1: USB disconnect, device number 5 [ 108.138621][ T3394] usb 1-1: USB disconnect, device number 13 [ 108.191409][ T8] usb 2-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 108.203022][ T8] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 108.222962][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.236553][ T6259] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 108.271618][ T8] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 108.313623][ T6263] syzkaller0: entered promiscuous mode [ 108.319346][ T6263] syzkaller0: entered allmulticast mode [ 108.639304][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 108.703530][ T6275] tipc: Enabling of bearer rejected, failed to enable media [ 108.854485][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.865851][ T27] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 108.875301][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.884959][ T27] usb 3-1: config 0 descriptor?? [ 108.894476][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 109.081115][ T788] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 109.121539][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 109.273625][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.283841][ T788] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 109.294781][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 109.302682][ T788] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 109.311905][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 109.318479][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.322221][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 109.326624][ T788] usb 4-1: Product: syz [ 109.335958][ T27] pwc: recv_control_msg error -32 req 02 val 2c00 [ 109.337502][ T8] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 109.342571][ T788] usb 4-1: Manufacturer: syz [ 109.357243][ T788] usb 4-1: SerialNumber: syz [ 109.361653][ T8] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 109.362166][ T27] pwc: recv_control_msg error -32 req 04 val 1000 [ 109.372873][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.391359][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.394477][ T788] usb 4-1: config 0 descriptor?? [ 109.406597][ T27] pwc: recv_control_msg error -32 req 04 val 1300 [ 109.423294][ T27] pwc: recv_control_msg error -32 req 04 val 1400 [ 109.433756][ T27] pwc: recv_control_msg error -32 req 02 val 2000 [ 109.444156][ T27] pwc: recv_control_msg error -32 req 02 val 2100 [ 109.451927][ T27] pwc: recv_control_msg error -32 req 04 val 1500 [ 109.669423][ T27] pwc: recv_control_msg error -71 req 02 val 2400 [ 109.678567][ T27] pwc: recv_control_msg error -71 req 02 val 2600 [ 109.686153][ T27] pwc: recv_control_msg error -71 req 02 val 2900 [ 109.693411][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 109.701763][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 109.708770][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 109.708955][ T8] usb 4-1: USB disconnect, device number 8 [ 109.722839][ T27] pwc: Registered as video103. [ 109.729786][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 109.762350][ T27] usb 3-1: USB disconnect, device number 6 [ 110.365352][ T6292] syzkaller0: entered promiscuous mode [ 110.371232][ T6292] syzkaller0: entered allmulticast mode [ 110.755663][ T8] usb 2-1: USB disconnect, device number 6 [ 111.001474][ T6302] capability: warning: `syz.1.167' uses 32-bit capabilities (legacy support in use) [ 111.924304][ T5840] usb 1-1: USB disconnect, device number 14 [ 112.138989][ T28] audit: type=1326 audit(1781937490.339:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.2.176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158719ce59 code=0x7ffc0000 [ 112.213395][ T28] audit: type=1326 audit(1781937490.339:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.2.176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158719ce59 code=0x7ffc0000 [ 112.249624][ T28] audit: type=1326 audit(1781937490.369:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.2.176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f158715d68e code=0x7ffc0000 [ 112.274472][ T28] audit: type=1326 audit(1781937490.369:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.2.176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f158719caeb code=0x7ffc0000 [ 112.324293][ T28] audit: type=1326 audit(1781937490.369:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.2.176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f158719caeb code=0x7ffc0000 [ 112.400533][ T28] audit: type=1326 audit(1781937490.369:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.2.176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f158719caeb code=0x7ffc0000 [ 112.426237][ T28] audit: type=1326 audit(1781937490.369:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.2.176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f158719caeb code=0x7ffc0000 [ 112.439348][ T27] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.476703][ T28] audit: type=1326 audit(1781937490.669:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.2.176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f158719caeb code=0x7ffc0000 [ 112.532652][ T28] audit: type=1326 audit(1781937490.679:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.2.176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f158719caeb code=0x7ffc0000 [ 112.619443][ T8] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 112.649242][ T788] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 112.659783][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 112.665452][ T28] audit: type=1326 audit(1781937490.869:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.2.176" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f158719caeb code=0x7ffc0000 [ 112.704512][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 112.714157][ T27] usb 3-1: config 9 has an invalid interface number: 57 but max is 0 [ 112.725018][ T27] usb 3-1: config 9 has no interface number 0 [ 112.732372][ T27] usb 3-1: config 9 interface 57 has no altsetting 0 [ 112.746634][ T27] usb 3-1: string descriptor 0 read error: -22 [ 112.753531][ T27] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 112.762691][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.840207][ T788] usb 1-1: too many configurations: 25, using maximum allowed: 8 [ 112.864941][ T8] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 112.869285][ T5840] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.889000][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.904240][ T788] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 112.904682][ T8] usb 4-1: config 0 has no interfaces? [ 112.928615][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.929280][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 112.957014][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.973974][ T8] usb 4-1: config 0 descriptor?? [ 112.993638][ T27] (null): keene_cmd_main failed (-71) [ 113.015447][ T788] usb 1-1: config 0 descriptor?? [ 113.026590][ T27] video4linux radio48: keene_cmd_main failed (-71) [ 113.078462][ T788] pwc: Creative Labs Webcam Pro Ex detected. [ 113.093002][ T27] radio-keene 3-1:9.57: V4L2 device registered as radio48 [ 113.103715][ T788] pwc: Warning: more than 1 configuration available. [ 113.119614][ T5840] usb 2-1: Using ep0 maxpacket: 32 [ 113.125750][ T27] usb 3-1: USB disconnect, device number 7 [ 113.133416][ T5840] usb 2-1: config index 0 descriptor too short (expected 18640, got 863) [ 113.145693][ T5840] usb 2-1: config 194 has too many interfaces: 199, using maximum allowed: 32 [ 113.174128][ T5840] usb 2-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config [ 113.186543][ T5840] usb 2-1: config 194 has 0 interfaces, different from the descriptor's value: 199 [ 113.204929][ T5840] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 113.216475][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.226668][ T5840] usb 2-1: Product: syz [ 113.231338][ T5840] usb 2-1: Manufacturer: syz [ 113.236041][ T5840] usb 2-1: SerialNumber: syz [ 113.486478][ T5840] usb 2-1: USB disconnect, device number 7 [ 113.587955][ T788] pwc: Failed to set LED on/off time (-71) [ 113.598986][ T788] pwc: send_video_command error -71 [ 113.618231][ T788] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 113.655918][ T788] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 113.684391][ T788] usb 1-1: USB disconnect, device number 15 [ 114.202202][ T6363] syzkaller1: entered promiscuous mode [ 114.207743][ T6363] syzkaller1: entered allmulticast mode [ 114.449716][ T788] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 114.477031][ T6367] warn_alloc: 3 callbacks suppressed [ 114.477045][ T6367] syz.0.186: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 114.524488][ T6367] CPU: 1 PID: 6367 Comm: syz.0.186 Not tainted syzkaller #0 [ 114.531851][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.541936][ T6367] Call Trace: [ 114.545233][ T6367] [ 114.548181][ T6367] dump_stack_lvl+0x18c/0x250 [ 114.552891][ T6367] ? show_regs_print_info+0x20/0x20 [ 114.558122][ T6367] ? load_image+0x420/0x420 [ 114.562666][ T6367] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 114.569116][ T6367] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 114.575704][ T6367] warn_alloc+0x246/0x340 [ 114.580099][ T6367] ? zone_watermark_ok_safe+0x230/0x230 [ 114.585697][ T6367] ? __mutex_trylock_common+0x160/0x270 [ 114.591270][ T6367] __vmalloc_node_range+0x129/0x1320 [ 114.596584][ T6367] ? tomoyo_path_number_perm+0x217/0x5e0 [ 114.602246][ T6367] ? rcu_is_watching+0x15/0xb0 [ 114.607043][ T6367] ? trace_contention_end+0x39/0xe0 [ 114.612265][ T6367] ? __mutex_lock+0x30d/0xc80 [ 114.616960][ T6367] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 114.622599][ T6367] ? tomoyo_path_number_perm+0x217/0x5e0 [ 114.628232][ T6367] ? free_vm_area+0x50/0x50 [ 114.632746][ T6367] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 114.637783][ T6367] vmalloc+0x79/0x90 [ 114.641683][ T6367] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 114.646712][ T6367] dvb_dvr_do_ioctl+0x12e/0x220 [ 114.651570][ T6367] dvb_usercopy+0x195/0x2b0 [ 114.656082][ T6367] ? dvb_dvr_release+0x3e0/0x3e0 [ 114.661026][ T6367] ? dvb_generic_ioctl+0xb0/0xb0 [ 114.665979][ T6367] ? dvb_dvr_poll+0x230/0x230 [ 114.670656][ T6367] dvb_dvr_ioctl+0x29/0x30 [ 114.675075][ T6367] __se_sys_ioctl+0xfd/0x170 [ 114.679673][ T6367] do_syscall_64+0x55/0xb0 [ 114.684093][ T6367] ? clear_bhb_loop+0x40/0x90 [ 114.688769][ T6367] ? clear_bhb_loop+0x40/0x90 [ 114.693473][ T6367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.699396][ T6367] RIP: 0033:0x7fdf2e59ce59 [ 114.703838][ T6367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.723536][ T6367] RSP: 002b:00007fdf2f4b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.731953][ T6367] RAX: ffffffffffffffda RBX: 00007fdf2e815fa0 RCX: 00007fdf2e59ce59 [ 114.739929][ T6367] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000005 [ 114.747900][ T6367] RBP: 00007fdf2e632e6f R08: 0000000000000000 R09: 0000000000000000 [ 114.755873][ T6367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.763847][ T6367] R13: 00007fdf2e816038 R14: 00007fdf2e815fa0 R15: 00007ffdcc7b09f8 [ 114.771832][ T6367] [ 114.814871][ T6367] Mem-Info: [ 114.826683][ T6367] active_anon:6739 inactive_anon:0 isolated_anon:0 [ 114.826683][ T6367] active_file:10756 inactive_file:39985 isolated_file:0 [ 114.826683][ T6367] unevictable:768 dirty:67 writeback:0 [ 114.826683][ T6367] slab_reclaimable:9959 slab_unreclaimable:91358 [ 114.826683][ T6367] mapped:24759 shmem:1364 pagetables:562 [ 114.826683][ T6367] sec_pagetables:0 bounce:0 [ 114.826683][ T6367] kernel_misc_reclaimable:0 [ 114.826683][ T6367] free:1351417 free_pcp:10074 free_cma:0 [ 114.896822][ T6367] Node 0 active_anon:26956kB inactive_anon:0kB active_file:43024kB inactive_file:159740kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99036kB dirty:268kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10764kB pagetables:2348kB sec_pagetables:0kB all_unreclaimable? no [ 114.929397][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 114.936412][ T788] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 114.945868][ T788] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 114.957609][ T6367] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 114.989536][ T6367] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 114.997486][ T788] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.017961][ T6367] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 115.035731][ T788] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.038128][ T6367] Node 0 [ 115.047168][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.047796][ T6367] DMA32 free:1503788kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:26984kB inactive_anon:0kB active_file:43024kB inactive_file:158904kB unevictable:1536kB writepending:268kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:14308kB local_pcp:5088kB free_cma:0kB [ 115.062832][ T788] usbtmc 2-1:16.0: bulk endpoints not found [ 115.090680][ T6367] lowmem_reserve[]: 0 0 0 0 0 [ 115.101316][ T6367] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 115.128780][ T6367] lowmem_reserve[]: 0 0 0 0 0 [ 115.133951][ T6367] Node 1 Normal free:3886456kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:25496kB local_pcp:14424kB free_cma:0kB [ 115.165719][ T6367] lowmem_reserve[]: 0 0 0 0 0 [ 115.170977][ T6367] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 115.184026][ T5840] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 115.193279][ T6367] Node 0 DMA32: 1*4kB (E) 133*8kB (UME) 700*16kB (UM) 342*32kB (UM) 260*64kB (UME) 13*128kB (UME) 4*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 6*2048kB (UME) 353*4096kB (UM) = 1503788kB [ 115.211870][ T6367] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 115.227375][ T6367] Node 1 Normal: 204*4kB (UME) 57*8kB (UME) 42*16kB (UME) 57*32kB (UME) 17*64kB (UME) 7*128kB (UME) 1*256kB (M) 1*512kB (E) 1*1024kB (U) 2*2048kB (UE) 946*4096kB (M) = 3886456kB [ 115.243526][ T3394] usb 4-1: USB disconnect, device number 9 [ 115.245438][ T6367] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.260907][ T6367] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.289453][ T6367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.305376][ T6367] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.331868][ T6367] 52104 total pagecache pages [ 115.336606][ T6367] 0 pages in swap cache [ 115.341969][ T6367] Free swap = 124440kB [ 115.346145][ T6367] Total swap = 124996kB [ 115.350352][ T6367] 2097051 pages RAM [ 115.354187][ T6367] 0 pages HighMem/MovableOnly [ 115.358857][ T6367] 416931 pages reserved [ 115.363251][ T6367] 0 pages cma reserved [ 115.369308][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 115.377826][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.425259][ T5840] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 115.455015][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.480105][ T6374] netlink: 24 bytes leftover after parsing attributes in process `syz.3.190'. [ 115.482481][ T5840] usb 3-1: config 0 descriptor?? [ 115.532955][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 115.732634][ T5840] usbhid 3-1:0.0: can't add hid device: -71 [ 115.754710][ T5840] usbhid: probe of 3-1:0.0 failed with error -71 [ 115.801555][ T27] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 115.811252][ T5840] usb 3-1: USB disconnect, device number 8 [ 116.013370][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.025771][ T27] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 116.043479][ T27] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 116.062154][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.071860][ T27] usb 1-1: Product: syz [ 116.076274][ T27] usb 1-1: Manufacturer: syz [ 116.083736][ T27] usb 1-1: SerialNumber: syz [ 116.093009][ T27] usb 1-1: config 0 descriptor?? [ 116.556905][ T27] usb 1-1: USB disconnect, device number 16 [ 116.693016][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 116.721390][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 116.756788][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 116.775928][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 116.799702][ T6393] syzkaller0: entered promiscuous mode [ 116.805250][ T6393] syzkaller0: entered allmulticast mode [ 117.205465][ T27] usb 2-1: USB disconnect, device number 8 [ 117.212709][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.196'. [ 117.445819][ T6405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.199'. [ 117.510842][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'. [ 117.695817][ T6411] syzkaller0: entered promiscuous mode [ 117.719972][ T6411] syzkaller0: entered allmulticast mode [ 117.759494][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 117.952424][ T27] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 117.968921][ T27] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 118.003345][ T27] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 118.019312][ T27] usb 4-1: config 220 has no interface number 2 [ 118.025640][ T27] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 118.046483][ T27] usb 4-1: config 220 interface 0 has no altsetting 0 [ 118.053393][ T27] usb 4-1: config 220 interface 76 has no altsetting 0 [ 118.063273][ T27] usb 4-1: config 220 interface 1 has no altsetting 0 [ 118.080421][ T27] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 118.090877][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.098910][ T27] usb 4-1: Product: syz [ 118.109029][ T27] usb 4-1: Manufacturer: syz [ 118.113824][ T27] usb 4-1: SerialNumber: syz [ 118.160110][ T5850] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 118.168039][ T6426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.210'. [ 118.239271][ T3394] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 118.349238][ T5850] usb 3-1: Using ep0 maxpacket: 8 [ 118.361191][ T27] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 118.371765][ T5850] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 118.382595][ T27] usb 4-1: No valid video chain found. [ 118.388417][ T27] usb 4-1: selecting invalid altsetting 0 [ 118.394875][ T5850] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 118.414944][ T5850] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.432496][ T5850] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 118.442057][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.444288][ T27] usb 4-1: selecting invalid altsetting 0 [ 118.466543][ T3394] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.470997][ T5850] usbtmc 3-1:16.0: bulk endpoints not found [ 118.483665][ T27] usbtest: probe of 4-1:220.1 failed with error -22 [ 118.498330][ T3394] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.503575][ T27] usb 4-1: USB disconnect, device number 10 [ 118.525218][ T3394] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 118.550273][ T5840] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 118.579495][ T3394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.587556][ T3394] usb 2-1: Product: syz [ 118.604066][ T3394] usb 2-1: Manufacturer: syz [ 118.608722][ T3394] usb 2-1: SerialNumber: syz [ 118.627903][ T3394] usb 2-1: config 0 descriptor?? [ 118.749287][ T5840] usb 1-1: Using ep0 maxpacket: 32 [ 118.757775][ T5840] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.774193][ T5840] usb 1-1: too many endpoints for config 1 interface 2 altsetting 242: 255, using maximum allowed: 30 [ 118.786753][ T5840] usb 1-1: config 1 interface 2 altsetting 242 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 118.805650][ T5840] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.817569][ T5840] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 118.833940][ T5840] usb 1-1: config 1 interface 2 has no altsetting 0 [ 118.844337][ T5840] usb 1-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 118.871445][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.883403][ T5840] usb 1-1: Product: syz [ 118.893558][ T27] usb 2-1: USB disconnect, device number 9 [ 118.920492][ T5840] usb 1-1: Manufacturer: syz [ 118.933578][ T5840] usb 1-1: SerialNumber: syz [ 119.609013][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 119.825677][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 119.841175][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 119.850013][ T9] usb 4-1: config 0 has no interface number 0 [ 119.892053][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 119.930156][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.938547][ T9] usb 4-1: Product: syz [ 120.013580][ T9] usb 4-1: Manufacturer: syz [ 120.044655][ T9] usb 4-1: SerialNumber: syz [ 120.075066][ T9] usb 4-1: config 0 descriptor?? [ 120.101315][ T9] smsc95xx v2.0.0 [ 120.517769][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 120.541825][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 120.790587][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 120.826051][ T9] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 120.867620][ T9] usb 4-1: USB disconnect, device number 11 [ 120.945992][ T5850] usb 3-1: USB disconnect, device number 9 [ 121.275660][ T6444] syzkaller0: entered promiscuous mode [ 121.295491][ T6444] syzkaller0: entered allmulticast mode [ 121.871366][ T6456] __nla_validate_parse: 3 callbacks suppressed [ 121.871379][ T6456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.220'. [ 122.027254][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'. [ 122.260752][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 122.260762][ T28] audit: type=1326 audit(1781937500.469:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6458 comm="syz.2.221" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f158719ce59 code=0x0 [ 122.529540][ T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 122.721653][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.731909][ T27] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 122.753221][ T27] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 122.762761][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.772134][ T27] usb 4-1: Product: syz [ 122.776481][ T27] usb 4-1: Manufacturer: syz [ 122.784278][ T27] usb 4-1: SerialNumber: syz [ 122.792417][ T27] usb 4-1: config 0 descriptor?? [ 123.009055][ T27] usb 4-1: USB disconnect, device number 12 [ 123.027871][ T5850] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 123.208498][ T6426] Set syz1 is full, maxelem 65536 reached [ 123.246927][ T5840] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 123.254948][ T5850] usb 2-1: Using ep0 maxpacket: 8 [ 123.270367][ T5840] usb 1-1: unit 4 not found! [ 123.280482][ T5840] usb 1-1: unit 144 not found! [ 123.289245][ T5850] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 123.329295][ T5850] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 123.361936][ T5850] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.384594][ T5840] usb 1-1: USB disconnect, device number 17 [ 123.396211][ T5850] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.434069][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.462274][ T5850] usbtmc 2-1:16.0: bulk endpoints not found [ 123.478380][ T6476] syzkaller0: entered promiscuous mode [ 123.511515][ T6476] syzkaller0: entered allmulticast mode [ 123.656749][ T6481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.846044][ T6487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.231'. [ 123.930664][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.231'. [ 124.027300][ T6492] macvtap0: entered promiscuous mode [ 124.033835][ T6492] macvtap0: entered allmulticast mode [ 124.042719][ T6492] veth1_vlan: entered allmulticast mode [ 124.084014][ T6492] macvtap1: entered promiscuous mode [ 124.089905][ T6492] macvtap1: entered allmulticast mode [ 124.435297][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 124.461607][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 124.535218][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 124.563738][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 124.849301][ T5840] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 125.041492][ T5840] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.096290][ T5840] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 125.138685][ T5840] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 125.157653][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.191089][ T5840] usb 3-1: Product: syz [ 125.195324][ T5840] usb 3-1: Manufacturer: syz [ 125.207262][ T5840] usb 3-1: SerialNumber: syz [ 125.217760][ T5840] usb 3-1: config 0 descriptor?? [ 125.385890][ T6510] syzkaller0: entered promiscuous mode [ 125.393285][ T6510] syzkaller0: entered allmulticast mode [ 125.445884][ T5840] usb 3-1: USB disconnect, device number 10 [ 125.545056][ T28] audit: type=1326 audit(1781937503.749:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.3.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66dd9ce59 code=0x7ffc0000 [ 125.577448][ T6516] loop9: detected capacity change from 0 to 524287936 [ 125.585266][ T28] audit: type=1326 audit(1781937503.749:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.3.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66dd9ce59 code=0x7ffc0000 [ 125.622025][ T28] audit: type=1326 audit(1781937503.779:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.3.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc66dd9ce59 code=0x7ffc0000 [ 125.626200][ T6518] warn_alloc: 3 callbacks suppressed [ 125.626213][ T6518] syz.0.242: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 125.647862][ T28] audit: type=1326 audit(1781937503.779:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.3.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66dd9ce59 code=0x7ffc0000 [ 125.659255][ T6518] ,cpuset= [ 125.665708][ T28] audit: type=1326 audit(1781937503.779:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.3.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66dd9ce59 code=0x7ffc0000 [ 125.696237][ T6518] syz0,mems_allowed=0-1 [ 125.732296][ T6518] CPU: 0 PID: 6518 Comm: syz.0.242 Not tainted syzkaller #0 [ 125.739664][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 125.741126][ T5840] usb 2-1: USB disconnect, device number 10 [ 125.749724][ T6518] Call Trace: [ 125.749737][ T6518] [ 125.749745][ T6518] dump_stack_lvl+0x18c/0x250 [ 125.749774][ T6518] ? show_regs_print_info+0x20/0x20 [ 125.749797][ T6518] ? load_image+0x420/0x420 [ 125.767299][ T28] audit: type=1326 audit(1781937503.779:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.3.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc66dd9ce59 code=0x7ffc0000 [ 125.771843][ T6518] ? __rcu_read_unlock+0x7c/0xd0 [ 125.771875][ T6518] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 125.771899][ T6518] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 125.771923][ T6518] warn_alloc+0x246/0x340 [ 125.771954][ T6518] ? zone_watermark_ok_safe+0x230/0x230 [ 125.771993][ T6518] ? __mutex_trylock_common+0x160/0x270 [ 125.829286][ T28] audit: type=1326 audit(1781937503.779:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.3.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66dd9ce59 code=0x7ffc0000 [ 125.833495][ T6518] __vmalloc_node_range+0x129/0x1320 [ 125.833527][ T6518] ? tomoyo_path_number_perm+0x217/0x5e0 [ 125.833548][ T6518] ? rcu_is_watching+0x15/0xb0 [ 125.833571][ T6518] ? trace_contention_end+0x39/0xe0 [ 125.833587][ T6518] ? __mutex_lock+0x30d/0xc80 [ 125.833614][ T6518] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 125.833630][ T6518] ? tomoyo_path_number_perm+0x217/0x5e0 [ 125.833658][ T6518] ? free_vm_area+0x50/0x50 [ 125.833696][ T6518] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 125.833724][ T6518] vmalloc+0x79/0x90 [ 125.833747][ T6518] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 125.833771][ T6518] dvb_dvr_do_ioctl+0x12e/0x220 [ 125.833799][ T6518] dvb_usercopy+0x195/0x2b0 [ 125.833825][ T6518] ? dvb_dvr_release+0x3e0/0x3e0 [ 125.833851][ T6518] ? dvb_generic_ioctl+0xb0/0xb0 [ 125.833890][ T6518] ? dvb_dvr_poll+0x230/0x230 [ 125.833916][ T6518] dvb_dvr_ioctl+0x29/0x30 [ 125.900714][ T28] audit: type=1326 audit(1781937503.779:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.3.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc66dd9ce59 code=0x7ffc0000 [ 125.904206][ T6518] __se_sys_ioctl+0xfd/0x170 [ 125.904241][ T6518] do_syscall_64+0x55/0xb0 [ 125.909229][ T28] audit: type=1326 audit(1781937503.779:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6515 comm="syz.3.241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66dd9ce59 code=0x7ffc0000 [ 125.913125][ T6518] ? clear_bhb_loop+0x40/0x90 [ 126.002660][ T6518] ? clear_bhb_loop+0x40/0x90 [ 126.007348][ T6518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.013248][ T6518] RIP: 0033:0x7fdf2e59ce59 [ 126.017663][ T6518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.037281][ T6518] RSP: 002b:00007fdf2f4b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.045700][ T6518] RAX: ffffffffffffffda RBX: 00007fdf2e815fa0 RCX: 00007fdf2e59ce59 [ 126.053677][ T6518] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000005 [ 126.061648][ T6518] RBP: 00007fdf2e632e6f R08: 0000000000000000 R09: 0000000000000000 [ 126.069623][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.077591][ T6518] R13: 00007fdf2e816038 R14: 00007fdf2e815fa0 R15: 00007ffdcc7b09f8 [ 126.085570][ T6518] [ 126.155588][ T6522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.243'. [ 126.178796][ T6518] Mem-Info: [ 126.189677][ T6518] active_anon:5745 inactive_anon:0 isolated_anon:0 [ 126.189677][ T6518] active_file:10756 inactive_file:40006 isolated_file:0 [ 126.189677][ T6518] unevictable:768 dirty:79 writeback:0 [ 126.189677][ T6518] slab_reclaimable:9880 slab_unreclaimable:92981 [ 126.189677][ T6518] mapped:24849 shmem:1362 pagetables:606 [ 126.189677][ T6518] sec_pagetables:0 bounce:0 [ 126.189677][ T6518] kernel_misc_reclaimable:0 [ 126.189677][ T6518] free:1350037 free_pcp:11897 free_cma:0 [ 126.190373][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 126.252996][ T6518] Node 0 active_anon:22980kB inactive_anon:0kB active_file:42972kB inactive_file:159824kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99344kB dirty:316kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10672kB pagetables:2424kB sec_pagetables:0kB all_unreclaimable? no [ 126.306633][ T6518] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 126.344757][ T6518] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.374495][ T6518] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 126.381103][ T6518] Node 0 DMA32 free:1498584kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22844kB inactive_anon:0kB active_file:42972kB inactive_file:158988kB unevictable:1536kB writepending:316kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:22036kB local_pcp:11240kB free_cma:0kB [ 126.412216][ T6518] lowmem_reserve[]: 0 0 0 0 0 [ 126.417038][ T6518] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.444056][ T3394] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 126.453477][ T6518] lowmem_reserve[]: 0 0 0 0 0 [ 126.466405][ T6518] Node 1 Normal free:3886204kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:25888kB local_pcp:11300kB free_cma:0kB [ 126.524502][ T6518] lowmem_reserve[]: 0 0 0 0 0 [ 126.532660][ T6518] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 126.541611][ T6530] syzkaller0: entered promiscuous mode [ 126.546721][ T6518] Node 0 [ 126.551655][ T6530] syzkaller0: entered allmulticast mode [ 126.554212][ T6518] DMA32: 0*4kB 7*8kB (ME) 274*16kB (ME) 438*32kB (UME) 276*64kB (UME) 12*128kB (ME) 6*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 5*2048kB (ME) 353*4096kB (UM) = 1498392kB [ 126.584765][ T6518] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 126.598392][ T6518] Node 1 Normal: 201*4kB (UE) 55*8kB (UE) 40*16kB (UE) 55*32kB (UE) 17*64kB (UME) 6*128kB (UME) 1*256kB (M) 1*512kB (E) 1*1024kB (U) 2*2048kB (UE) 946*4096kB (M) = 3886204kB [ 126.619474][ T5815] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 126.621096][ T6518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.638153][ T6518] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.647812][ T6518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.659270][ T3394] usb 4-1: Using ep0 maxpacket: 16 [ 126.659275][ T6518] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.659295][ T6518] 52124 total pagecache pages [ 126.659304][ T6518] 0 pages in swap cache [ 126.669623][ T3394] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 126.680082][ T6518] Free swap = 124440kB [ 126.682995][ T3394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.691874][ T6518] Total swap = 124996kB [ 126.709488][ T6518] 2097051 pages RAM [ 126.713321][ T6518] 0 pages HighMem/MovableOnly [ 126.718009][ T6518] 416931 pages reserved [ 126.722583][ T3394] usb 4-1: Product: syz [ 126.726792][ T3394] usb 4-1: Manufacturer: syz [ 126.727013][ T6518] 0 pages cma reserved [ 126.732800][ T3394] usb 4-1: SerialNumber: syz [ 126.819489][ T5815] usb 2-1: Using ep0 maxpacket: 8 [ 126.835471][ T5815] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 126.866115][ T5815] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 126.894868][ T5815] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.905784][ T5815] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.921031][ T5815] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.931209][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.962699][ T3394] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 127.001337][ T3394] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 127.030361][ T3394] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 127.043516][ T3394] usb 4-1: media controller created [ 127.063496][ T3394] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.152205][ T5815] usb 2-1: GET_CAPABILITIES returned 0 [ 127.158004][ T5815] usbtmc 2-1:16.0: can't read capabilities [ 127.291513][ T3394] zl10353_read_register: readreg error (reg=127, ret==-110) [ 127.332777][ T3394] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 127.348564][ T3394] usb 4-1: USB disconnect, device number 13 [ 127.372758][ T27] usb 2-1: USB disconnect, device number 11 [ 128.069661][ T27] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 128.106199][ T6555] syzkaller0: entered promiscuous mode [ 128.119309][ T6555] syzkaller0: entered allmulticast mode [ 128.188928][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 128.188944][ T28] audit: type=1326 audit(1781937506.389:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.3.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66dd9ce59 code=0x7ffc0000 [ 128.243703][ T28] audit: type=1326 audit(1781937506.389:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.3.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66dd9ce59 code=0x7ffc0000 [ 128.289949][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.302144][ T27] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.311382][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.311673][ T28] audit: type=1326 audit(1781937506.389:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.3.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fc66dd9ce59 code=0x7ffc0000 [ 128.322281][ T27] usb 1-1: config 0 descriptor?? [ 128.358914][ T28] audit: type=1326 audit(1781937506.389:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.3.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66dd9ce59 code=0x7ffc0000 [ 128.433305][ T28] audit: type=1326 audit(1781937506.389:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.3.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66dd9ce59 code=0x7ffc0000 [ 128.483037][ T28] audit: type=1326 audit(1781937506.399:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.3.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66dd9ce59 code=0x7ffc0000 [ 128.527582][ T28] audit: type=1326 audit(1781937506.399:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.3.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66dd9ce59 code=0x7ffc0000 [ 128.598135][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 128.633229][ T27] usbhid: probe of 1-1:0.0 failed with error -71 [ 128.639363][ T28] audit: type=1326 audit(1781937506.439:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.3.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc66dd9ce59 code=0x7ffc0000 [ 128.685709][ T27] usb 1-1: USB disconnect, device number 18 [ 128.716712][ T28] audit: type=1326 audit(1781937506.439:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.3.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66dd9ce59 code=0x7ffc0000 [ 128.744707][ T6562] syzkaller0: entered promiscuous mode [ 128.765192][ T6562] syzkaller0: entered allmulticast mode [ 128.777753][ T28] audit: type=1326 audit(1781937506.439:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.3.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc66dd9ce59 code=0x7ffc0000 [ 129.083602][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 129.189328][ T27] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 129.319598][ T5850] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 129.400415][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.424357][ T27] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 129.459279][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.479055][ T27] usb 1-1: config 0 descriptor?? [ 129.519283][ T5850] usb 2-1: Using ep0 maxpacket: 8 [ 129.527846][ T5850] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 129.539073][ T5850] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 129.557885][ T5850] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.575050][ T5850] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.616273][ T5850] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 129.709062][ T5850] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 129.758151][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.818601][ T5850] usbtmc 2-1:16.0: bulk endpoints not found [ 129.959957][ T5815] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 130.172560][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.182787][ T5815] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 130.193821][ T5815] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 130.202978][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.211053][ T5815] usb 3-1: Product: syz [ 130.215224][ T5815] usb 3-1: Manufacturer: syz [ 130.219883][ T5815] usb 3-1: SerialNumber: syz [ 130.226920][ T5815] usb 3-1: config 0 descriptor?? [ 130.310779][ T27] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 130.314183][ T6544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.320065][ T27] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 130.345232][ T6544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.404391][ C1] ================================================================================ [ 130.413747][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 130.422363][ C1] index 261 is out of range for type 'const int[34]' [ 130.429033][ C1] CPU: 1 PID: 5775 Comm: udevd Not tainted syzkaller #0 [ 130.435984][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.438762][ T5815] usb 3-1: USB disconnect, device number 11 [ 130.446180][ C1] Call Trace: [ 130.446196][ C1] [ 130.446205][ C1] dump_stack_lvl+0x18c/0x250 [ 130.446239][ C1] ? show_regs_print_info+0x20/0x20 [ 130.446263][ C1] ? load_image+0x420/0x420 [ 130.446294][ C1] ubsan_epilogue+0xa/0x30 [ 130.446314][ C1] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 130.446345][ C1] aiptek_irq+0x1eb8/0x2920 [ 130.487385][ C1] ? kcov_remote_start+0x8a/0x7e0 [ 130.492426][ C1] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 130.498177][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 130.503568][ C1] dummy_timer+0xa40/0x3420 [ 130.508113][ C1] ? dummy_free_streams+0x520/0x520 [ 130.513318][ C1] ? dummy_free_streams+0x520/0x520 [ 130.518520][ C1] __hrtimer_run_queues+0x525/0xc10 [ 130.523736][ C1] ? hrtimer_interrupt+0x980/0x980 [ 130.528849][ C1] ? read_tsc+0x9/0x20 [ 130.532927][ C1] hrtimer_run_softirq+0x177/0x290 [ 130.538047][ C1] handle_softirqs+0x27d/0x820 [ 130.542829][ C1] ? read_tsc+0x9/0x20 [ 130.546901][ C1] ? ktime_get+0x24b/0x280 [ 130.551328][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 130.556097][ C1] ? do_softirq+0x1a0/0x1a0 [ 130.560615][ C1] __irq_exit_rcu+0xd3/0x190 [ 130.565212][ C1] ? irq_exit_rcu+0x20/0x20 [ 130.569732][ C1] irq_exit_rcu+0x9/0x20 [ 130.573974][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 130.579614][ C1] [ 130.582541][ C1] [ 130.585470][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 130.591459][ C1] RIP: 0010:d_set_d_op+0x9/0x370 [ 130.596406][ C1] Code: 07 80 c1 03 38 c1 0f 8c 67 ff ff ff 48 89 df e8 cd b2 ea ff e9 5a ff ff ff 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 <41> 55 41 54 53 49 89 f6 48 89 fb 49 bc 00 00 00 00 00 fc ff df e8 [ 130.616019][ C1] RSP: 0018:ffffc9000470f950 EFLAGS: 00000293 [ 130.622089][ C1] RAX: ffffffff81f92ba9 RBX: ffff8880767a2000 RCX: ffff888029793c00 [ 130.630061][ C1] RDX: 0000000000000000 RSI: ffffffff8ad80b00 RDI: ffff8880767a2000 [ 130.638033][ C1] RBP: 0000000000000006 R08: ffffffff8e8ae5ef R09: 0000000000000000 [ 130.646007][ C1] R10: fffff520008e1ec8 R11: fffffbfff1d15cbe R12: dffffc0000000000 [ 130.653985][ C1] R13: 0000000000028241 R14: ffff8880767a20e0 R15: ffff88807e12e730 [ 130.661967][ C1] ? simple_lookup+0xa9/0xf0 [ 130.666573][ C1] simple_lookup+0xb8/0xf0 [ 130.670993][ C1] ? always_delete_dentry+0x10/0x10 [ 130.676197][ C1] path_openat+0x1110/0x3270 [ 130.680805][ C1] ? do_filp_open+0x430/0x430 [ 130.685494][ C1] do_filp_open+0x1f2/0x430 [ 130.690000][ C1] ? vfs_tmpfile+0x480/0x480 [ 130.694601][ C1] ? _raw_spin_unlock+0x28/0x40 [ 130.699473][ C1] ? alloc_fd+0x590/0x640 [ 130.703854][ C1] do_sys_openat2+0x134/0x1d0 [ 130.708548][ C1] ? kmem_cache_free+0xf8/0x290 [ 130.713405][ C1] ? do_sys_open+0xe0/0xe0 [ 130.717826][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 130.723816][ C1] ? lock_chain_count+0x20/0x20 [ 130.728679][ C1] __x64_sys_openat+0x139/0x160 [ 130.733539][ C1] do_syscall_64+0x55/0xb0 [ 130.737956][ C1] ? clear_bhb_loop+0x40/0x90 [ 130.742631][ C1] ? clear_bhb_loop+0x40/0x90 [ 130.747306][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.753206][ C1] RIP: 0033:0x7f89a20a7407 [ 130.757625][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 130.777246][ C1] RSP: 002b:00007ffda5dce550 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 130.785668][ C1] RAX: ffffffffffffffda RBX: 00007f89a2886880 RCX: 00007f89a20a7407 [ 130.793642][ C1] RDX: 00000000000a0241 RSI: 00007ffda5dcf210 RDI: ffffffffffffff9c [ 130.801610][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.809577][ C1] R10: 0000000000000124 R11: 0000000000000202 R12: 000055e8ba0fbba0 [ 130.817567][ C1] R13: 00007ffda5dcf210 R14: 00007ffda5dcee10 R15: 00007ffda5dcea10 [ 130.825574][ C1] [ 130.828591][ C1] ================================================================================ [ 130.837894][ C1] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 130.845089][ C1] CPU: 1 PID: 5775 Comm: udevd Not tainted syzkaller #0 [ 130.852030][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.862084][ C1] Call Trace: [ 130.865358][ C1] [ 130.868198][ C1] dump_stack_lvl+0x18c/0x250 [ 130.872891][ C1] ? show_regs_print_info+0x20/0x20 [ 130.878098][ C1] ? load_image+0x420/0x420 [ 130.882603][ C1] panic+0x2ca/0x720 [ 130.886506][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 130.891026][ C1] check_panic_on_warn+0x84/0xa0 [ 130.895967][ C1] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 130.901694][ C1] aiptek_irq+0x1eb8/0x2920 [ 130.906206][ C1] ? kcov_remote_start+0x8a/0x7e0 [ 130.911237][ C1] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 130.916964][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 130.922341][ C1] dummy_timer+0xa40/0x3420 [ 130.926880][ C1] ? dummy_free_streams+0x520/0x520 [ 130.932085][ C1] ? dummy_free_streams+0x520/0x520 [ 130.937282][ C1] __hrtimer_run_queues+0x525/0xc10 [ 130.942494][ C1] ? hrtimer_interrupt+0x980/0x980 [ 130.947603][ C1] ? read_tsc+0x9/0x20 [ 130.951681][ C1] hrtimer_run_softirq+0x177/0x290 [ 130.956795][ C1] handle_softirqs+0x27d/0x820 [ 130.961558][ C1] ? read_tsc+0x9/0x20 [ 130.965625][ C1] ? ktime_get+0x24b/0x280 [ 130.970048][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 130.974817][ C1] ? do_softirq+0x1a0/0x1a0 [ 130.979322][ C1] __irq_exit_rcu+0xd3/0x190 [ 130.983913][ C1] ? irq_exit_rcu+0x20/0x20 [ 130.988420][ C1] irq_exit_rcu+0x9/0x20 [ 130.992659][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 130.998302][ C1] [ 131.001228][ C1] [ 131.004155][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 131.010147][ C1] RIP: 0010:d_set_d_op+0x9/0x370 [ 131.015091][ C1] Code: 07 80 c1 03 38 c1 0f 8c 67 ff ff ff 48 89 df e8 cd b2 ea ff e9 5a ff ff ff 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 <41> 55 41 54 53 49 89 f6 48 89 fb 49 bc 00 00 00 00 00 fc ff df e8 [ 131.034713][ C1] RSP: 0018:ffffc9000470f950 EFLAGS: 00000293 [ 131.040794][ C1] RAX: ffffffff81f92ba9 RBX: ffff8880767a2000 RCX: ffff888029793c00 [ 131.048769][ C1] RDX: 0000000000000000 RSI: ffffffff8ad80b00 RDI: ffff8880767a2000 [ 131.056742][ C1] RBP: 0000000000000006 R08: ffffffff8e8ae5ef R09: 0000000000000000 [ 131.064719][ C1] R10: fffff520008e1ec8 R11: fffffbfff1d15cbe R12: dffffc0000000000 [ 131.072691][ C1] R13: 0000000000028241 R14: ffff8880767a20e0 R15: ffff88807e12e730 [ 131.080671][ C1] ? simple_lookup+0xa9/0xf0 [ 131.085277][ C1] simple_lookup+0xb8/0xf0 [ 131.089704][ C1] ? always_delete_dentry+0x10/0x10 [ 131.094908][ C1] path_openat+0x1110/0x3270 [ 131.099514][ C1] ? do_filp_open+0x430/0x430 [ 131.104200][ C1] do_filp_open+0x1f2/0x430 [ 131.108705][ C1] ? vfs_tmpfile+0x480/0x480 [ 131.113313][ C1] ? _raw_spin_unlock+0x28/0x40 [ 131.118174][ C1] ? alloc_fd+0x590/0x640 [ 131.122517][ C1] do_sys_openat2+0x134/0x1d0 [ 131.127201][ C1] ? kmem_cache_free+0xf8/0x290 [ 131.132064][ C1] ? do_sys_open+0xe0/0xe0 [ 131.136480][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 131.142492][ C1] ? lock_chain_count+0x20/0x20 [ 131.147349][ C1] __x64_sys_openat+0x139/0x160 [ 131.152212][ C1] do_syscall_64+0x55/0xb0 [ 131.156635][ C1] ? clear_bhb_loop+0x40/0x90 [ 131.161317][ C1] ? clear_bhb_loop+0x40/0x90 [ 131.165993][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.171895][ C1] RIP: 0033:0x7f89a20a7407 [ 131.176314][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 131.195922][ C1] RSP: 002b:00007ffda5dce550 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 131.204338][ C1] RAX: ffffffffffffffda RBX: 00007f89a2886880 RCX: 00007f89a20a7407 [ 131.212313][ C1] RDX: 00000000000a0241 RSI: 00007ffda5dcf210 RDI: ffffffffffffff9c [ 131.220280][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.228251][ C1] R10: 0000000000000124 R11: 0000000000000202 R12: 000055e8ba0fbba0 [ 131.236221][ C1] R13: 00007ffda5dcf210 R14: 00007ffda5dcee10 R15: 00007ffda5dcea10 [ 131.244205][ C1] [ 131.247484][ C1] Kernel Offset: disabled [ 131.251836][ C1] Rebooting in 86400 seconds..